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AMENDMENTS TO THE CLAIMS 



Please amend the claims as indicated hereafter. [ Sfrik e through i$ used for 
deleted matter (or double square brackets "[[]]" is used if the strikethrough is not 
easily perceivable, i.e., "4" or a punctuation mark) and underlined is used for added 
matter.] 

1- (Currently amended) A method of delivering and determining the authenticity 
of a digital document sent by an unknown sender to an intended recipient at a printout 
station, the method comprising: 

receiving and securely retaining a digital document and a transmitted 
independently verifiable data record of the intended recipient at a printout station, an 
encrypted digest of the document created by the sender using a ha$h algorithm, the 
digest being encrypted using a first token of the sender; 

obtaining a second token relating to the first token of the sender; 

obtaining a first token of the intended recipient; 

decoding the encrypted digest using the second token of the sender; 

using a hash algorithm to create a digest of the document; 

comparing the decrypted received digest with the newly created digest to 
determine the authenticity of the sender and the document; 

requesting proof of the intended recipient's identity at the printout station using 
data in the independently verifiable data record of the intended recipient; 

decoding encrypted identi fication data with the first token of the intended 
recipient, the encry pted identification data being identification data from the 
independently verifiable data record that is encrypted using a second token of the 
recipient: 

comparing the decrypted id entification data with contents of the independently 
Verifiable data record to determine the authenticit y of the recipient of the do cument: 
and 

releasing the document when the intended recipient has proved their identity 
by use of [[aj] the second token that is uniquely related to the first token of the 
intended recipient. 
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2. (Original) A method according to Claim 1, wherein the receiving step 
comprises receiving a digital certificate of the sender. 

3. (Previously presented) A method according to Claim 2, wherein the obtaining 
step comprises the second token of the $ender being sent as part of the sender's digital 
certificate. 

4. (Original) A method according to Claim 2, further comprising carrying out an 
on-line check of the validity of the sender's certificate. 

5. (Currently Amended) A method according to Claim 1, wherein the first and 
second tokens of the sender comprise private and public encryption/decryption keys of 
the sender and the first and second tokens of the intended recipient comprise private 
and publi c encryption/decryption kevs of the intended recipient 

6. (Original) A method according to Claim 1, further comprising printing out a 
copy of the document once the sender and the document have been authenticated. 

7. (Original) A method according to Claim 6, wherein the method fhrther 
comprises printing a verifying mark on the printed copy of the document to signify its 
authenticity. 

8. (Original) A method according to Claim 1, wherein the transmitted document 
comprises a fax document. 
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9. (Currently amended) A method of sending and delivering a digital document 
to an intended recipient at a printout station together with data enabling the document 
and the sender to be authenticated, the method comprising: 

creating a digest of the document using a hash algorithm; 

obtaining a first token of the intended recipient; 

encrypting the digest using a first token of the sender; 

obtaining a second token relating to the first token of the sender, which can be 
used to decrypt the encrypted digest; 

encoding identification dat a of the intended recipient using the first token of 
the intended recipient: 

sending the encrypted digest, the digital document a**4 the second token of the 
sende r, and the encoded identification dafo to the recipient; 

receiving and securely retaining a transmitted documen t, the encoded 
identification data, and a transmitted independently verifiable data record of the 
intended recipient at a printout station; 

requesting proof of the intended recipient's identity at the printout station using 
data in the independently verifiable data record of the intended recipient; 

decoding the identificati on data of the intended recipient using a second token 
of the intended recipient: 

comparing the decoded identification data with contents of the independently 
verifiable data recor d to determine the authenticity of the recipient of the document; 
and 

releasing the document when the intended recipient has proved their identity 
by use of [[a]] the second token that is uniquely related to the first token of the 
recipient. 

10. (Original) A method according to Claim 9, wherein the transmitted document 
is a fax document. 

1 1 . (Previously presented) A method according to Claim 9, further comprising the 
sender proving their identity prior to the sending step by transferring data from a 
personal portable data carrier holding the first token of the sender to a transmission 
station from which the document is to be sent. 
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12. (Original) A method according to Claim 11, wherein the proving step further 
comprises the sender entering a verifiable security identifier into the transmission 
station to establish that they are the legitimate owner of the portable data carrier. 

13. (Original) A method according to Claim 11, wherein the step of encrypting 
the digest comprises supplying the digest of the document from the transmission 
station to the portable data carrier of the sender, encrypting the digest of the document 
on the portable data carrier, and returning the encrypted digest of the document from 
the portable data carrier to the transmission station. 

14. (Previously presented) A method according to any of Claim 9, further 
comprising obtaining details of the sender including the second token of the sender 
prior to transmitting the document. 

15. (Previously presented) A method according to Claim 14, wherein the step of 
obtaining details comprises obtaining the sender's details from a central database 
storing second tokens of the senders and other sender's details. 

16. (Previously presented) A method according to Claim 14, wherein the sender's 
details and the second token of the sender are provided in a sendees digital certificate, 

17. (Previously presented) A method according to any of Claim 9, wherein the 
first and second tokens of the sender comprise private and public 
encryption/decryption keys of the sender. 
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18. (Currently amended) A device for delivering and determining the authenticity 
of a digital document sent by an unknown sender to an intended recipient at a printout 
station, the device comprising: 

a communications module arranged to receive an electronic version of the 
transmitted document over a communications network, an independently verifiable 
data record of the intended recipient, a first token of the intended recipient, an 
encrypted digest of the document created by the sender using a hash algorithm, the 
digest being encrypted using a first token of the sender, and a second token relating to 
the first token of the sender; 

a store for. securely retaining the transmitted document, the transmitted 
independently verifiable data record and the first token of the intended recipient; 

an instruction module for requesting proof of the intended recipient's identity 
using data provided in the intended recipient's data record; and 

a controller arranged to decode the encrypted digest using the second token of 
the sender; creating a digest of the document using a hash algorithm; comparing the 
decrypted received digest with the newly created digest to detennine the authenticity 
of the sender and the document; and releasing the document when the intended 
recipient has proved their identity by use of a second token of the intended recipient 
that is uniquely related to the first token of the intended recipien t, wherein the second 
token of the intende d recipient is used to decode encrypted identification data of the 
intended recipient that is compared to contents of the independently verifiable data 
record of the intended recipient to determine authenticity of the intended recipient . 
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19. (Currently amended) A device for sending and delivering a digital document 
to an intended recipient at a printout station together with data enabling the document 
and the sender to be authenticated, the device comprising: 

a controller ananged to create a digest of the document using a hash algorithm 
and to encrypt the digest using a first token of the sender, and to release the document 
when the intended recipient has proved their identity by use of a second token of the 
intended recipient that is uniquely related to a tfee first token of the intended recipient^ 
wherein the secon d token of the intended recipient is used to decode encrypted 
identification data of the inten ded recipient that was generated using the first token of 
the intended recipien t, the decoded identification data being compared to contents of 
an independently ve rifiable data record of the intended recipient to determine 
authenticit y of the intended recipient : 

a store for securely retaining the a transmitted document, the a transmitted 
independently verifiable data record and the first token of the intended recipient; 

an instruction module for requesting proof of the intended recipient's identity 
using data provided in the intended recipient's data record; and 

a communications module arranged to obtain an electronic version of the 
transmitted document over a communication* network, an the independently 
verifiable data record of the intended recipient, a the first token of the intended 
recipient, a second token of the sender related to the first token of the sender, which 
can be used to decrypt the encrypted digest and to send the encrypted digest, the 
digital document and the second token to the recipient. 
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